tests works on CORS